# Crestwatch - coordinated vulnerability disclosure
#
# Crestwatch makes a connected river-level sensor (CWR-1C) and the
# service at crestwatchpro.com. If you have found a security problem
# in either, please tell us. We will not take legal action against
# anyone who reports in good faith under this policy.
#
# Required from 11 September 2026 by the EU Cyber Resilience Act
# (Regulation (EU) 2024/2847), Article 13(8) - a single point of
# contact for coordinated vulnerability disclosure.

Contact: mailto:security@crestwatchpro.com
Contact: https://crestwatchpro.com/security-policy
Expires: 2027-08-01T00:00:00.000Z
Preferred-Languages: en, it
Canonical: https://crestwatchpro.com/.well-known/security.txt
Policy: https://crestwatchpro.com/security-policy